AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-26618

HIGH · CVSS 7.1 EPSS 1.00%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-02-18 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.1. It affects Office. It may be remotely exploitable.

CVE
CVE-2021-26618
Severity
HIGH
CVSS
7.1
EPSS
1.00%
Office

Original NVD Description

An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code.

Related CVEs

Other vulnerabilities affecting the same vendor(s)